.. _team-specific-info: Team Specific Info ================== Information such as passwords, SSNs, credit card numbers, and other sensitive information that is not shared amongst all teams can be entered into IScorE as Team Specific Information. These will be displayed on the Blue Teams' Dashboards as well as be available to Green Team members. When creating Team Specific Information, you have the option to have IScorE generate fake information for fields such as names, SSNs, Credit Card Numbers, as well as passwords. Team Specific Information is made available to the service scanner, so you can define that a certain scenario user has a different password for each team and the service scanner will be able to use them. Add Team Specific Information ----------------------------- #. On the left side-bar menu, click on "Admin Area". #. On the left side-bar menu, click on "Teams". A page like the one below will appear. .. image:: images/team_list.png #. Click on the blue button "Team Specific Info" that is the leftmost button in the upper right corner. A page like the one below will appear. .. image:: images/tsi_list.png #. Click on the blue "Add Team Specific Info" in the upper right corner. A form like the one below will appear. .. image:: images/tsi_add_cat.png #. Enter in the name of the team specific info category. - *Note:* Category names containing the word 'password' (case-insensitive) are automatically added to the 'All Users' TSI Pool #. If this category is going to be used as credentials for the service scanner, enter a username, otherwise leave the username field empty. #. Click the "Released" checkbox if you wish it to be visible to the Blue Teams immediately. You may also specify a time at which the category will be released automatically. #. Click the "Shared" checkbox if you wish it not shown in the team-specific information changer. This is useful for passwords that are shared by all teams. #. Click the "Hidden" checkbox if you hide the team-specific category from blue teams #. Click the "Generate DOB" button to have IScorE generate a Date of Birth matching the category you are creating. The name of the additional category will be determined based on the original category. For example, `Thomas's Password` would result in `Thomas's Date of Birth`. For realism's sake, the date will be between 21 and 90 years ago. #. You can have IScorE generate a number of different types of information for you by selecting the appropriate option in the list. If you want to set it to a custom value select "Set all to same" or you can manually set the value for all the teams by selected "No Generation" and filling in the values below. - *Note:* Selecting "Generate Password" will automatically add the category to the 'All Users' TSI Pool #. Click on the blue Submit button in the bottom right corner. Mass TSI Import ----------------------------- Alternatively, if you have a CSV containing all of the TSI values you would like to add, simply click on the "Mass TSI Import" button. It will expect a CSV containing a list of values for the TSI. #. Name. The name of the TSI category, usually "John Doe's Password" or "Jane Doe's SSN" #. Username. The username of the category to use for authentication in the case of the service scanner #. Generate. This can be 'static', 'date' or 'dob' or 'ssn' or 'password'. Note: If the value is anything except 'static' whatever exists in the "Value" field will be overwritten. #. Value. The value to set for this Team Specific Info Category. Only "Generate" values of 'static' will apply here. #. Released. A boolean whether this item has been released. #. Release time. Expecting a time in the format YYYY-mm-dd HH:MM in 24 hour format when to release. Note: If "Released" is marked at True, it defaults to the time of creation. #. Shared. A boolean if this is a shared password or value. This is only applicable for static values, everything else is not shared. #. Hidden. A boolean noting if you elect to hide this item from Blue teams. #. Green Hidden. A boolean noting if this value is to be hidden from Green team. #. Pool. The team information pool for the service scanner to use for scanning. This should only include password categories. View Team Specific Information ------------------------------ 1. On the left side-bar menu, click on "Admin Area". 2. On the left side-bar menu, click on "Teams". A page like the one below will appear. .. image:: images/team_list.png 3. Click on the blue button "Team Specific Info" that is the leftmost button in the upper right corner. A page like the one below will appear. .. image:: images/tsi_list.png 4. In the table, the existing team-specific information categories are listed. 5. Click on the name of the team-specific category you want to view or edit. A table containing the values for each team like the one below will appear. .. image:: images/tsi_show.png Edit Team Specific Information ------------------------------ 1. On the left side-bar menu, click on "Admin Area". 2. On the left side-bar menu, click on "Teams". A page like the one below will appear. .. image:: images/team_list.png 3. Click on the blue button "Team Specific Info" that is the leftmost button in the upper right corner. A page like the one below will appear. .. image:: images/tsi_list.png 4. Click on the white "Edit" button to the right of the team-specific information category you want to change. A form similar to the form shown when adding will appear. 5. Change the desired values. 6. Click the blue "Submit" button in the bottom right hand corner to save your changes. Delete Team Specific Information -------------------------------- 1. On the left side-bar menu, click on "Admin Area". 2. On the left side-bar menu, click on "Teams". A page like the one below will appear. .. image:: images/team_list.png 3. Click on the blue button "Team Specific Info" that is the leftmost button in the upper right corner. A page like the one below will appear. .. image:: images/tsi_list.png 4. Click the red "Delete" button to the right of the team-specific information category you want to delete. A message box confirming the deletion of the category will appear. 5. Click the red "Delete" button to confirm the deletion. Change A Team's Team Specific Info ---------------------------------- 1. In the Team Specific Info screen, click on the gray "TSI Changer" button. A form like the one below will appear. .. image:: images/password_changer.png 2. Select the team you want to change TSI for in the "Team" drop-down menu. 3. Select the info you want to change in the "Team Specific Category" drop-down menu. 4. Enter in the new value *or* choose the type of information you want IScorE to generate for you. 5. Click the blue "Submit" button in the bottom right corner. Any service scans that are using the selected Team Specific Info as a password will automatically use the updated value.